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1. INTRODUCTION 

In the digital world, a watermark can be applied as a pattern of bits inserted into a digital platform to 
identify the creator. The identification or modification can be avoided by embedding and scattering the bits 
into an image. Robust watermark is designed to resist arbitrary, malicious attacks such as gaussian, salt and 
pepper, blurring, and compression [1]. A digital watermarking system comprises three basic aspects: the 
generation of the watermark, the embedded process, and the extraction of the watermark. The 
imperceptibility and robustness are required in digital watermarking through the analysis of the image host 
and the embedded point selection [2]. 

The implementation of the digital watermarking method can be divided into spatial domain and 
frequency domain. The watermark signals are superposed on the signal space directly and over spatial 
domain digital watermarking while the spread spectrum in the frequency-domain digital watermarking is 
applied to hide the watermark information. Some techniques are based on image transformations, such as 
discrete cosine transform (DCT), discrete wavelet transforms (DWT), discrete fourier transform (DFT), or 
fast fourier transform (FFT) [3]. 

The multiresolution decomposition of signals and images is the main idea of the wavelet transform 
because a higher resolution is required in a small object, and a low resolution is suitable for larger objects [4]. 
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Several studies have been carried out in the field of watermarking. In 2015, Abdullah et al. [5] proposed the 
robust DCT method for securing iris. This paper explained the security of biometric traits and presented the 
integrity of the iris image protection using a demographic text as a watermark. The watermark text will be 
embedded in the middle band frequency of the iris image. The three middle band coefficients pairs of DCT 
will be interchanged. The results showed that this method scheme yielded a robust algorithm against 
malicious attacks. However, the resolution of the image host and watermark image was not discussed. 

In 2015, Jain and Jain [6] focused on combining different transform domain techniques. The method 
was used a hybrid 3-level DWT-FFT. Laur et al. [7] proposed a non-blind color image with robustness and 
imperceptibility image watermarking algorithm. Furthermore, Mulya and Utama [8] developed fast fourier 
transform to insert and extract the watermark in the LSB frequency domain on the audio files. The result 
showed the extracted watermark had a good performance in robustness and imperceptibility. In another case, 
Rajawat and Tomar [9] proposed the combination between digital watermarking and tampering detection to 
improve image security. The result yielded good PSNR, which achieved 55%. Viadya and Mouli [10] applied 
the scaling and embedding factors as namely the adaptive method. This project aims to preserve the 
ownership rights from piracy of digital data. The statistical evaluation denoted the efficacy of the method. 

In 2016, Kaur [11] proposed DCT, DWT, FFT, and SVD techniques with a new integrated 
watermarking technique. The input cover image will be used the DCT technique while further action will be 
performed by FFT and will be followed by DWT to arrange the sub-bands. In 2016, Muldokar and Shenvi 
[12] this project aimed to combine DWT-DCT transformation in low frequency watermarking. The wavelets 
coefficients modifying is selected the DWT sub-band of a host image after two levels of DWT decomposition 
and block-based DCT transform. The method can solve the processing and geometric attacks. Furthermore, 
Ansari et. al. proposed a remarkable solution to a false-positive problem that arises in SVD based approach. 
Firstly, the host image is employed by the IWT, and SVD contributes to achieving a high value of robustness. 
The watermark embedding will be used the singular values. The optimization with artificial bee colony will 
help to improve the quality of watermarking [13]. 

In 2016, Haribabu et al. [14] presented the wavelet transform in HIS color space. Firstly, the 
coefficients of one-level wavelet are generated by (LL, LH, HL, HH) to the intensity component of HSI color 
space cover image. This method gave an improvement in peak signal-noise ratio and mean square error. In 
2016, Al Shaikh et al. [15] provided the CT scan image watermarking based on wavelet transform. In the 
extraction process contributes to the improvement of watermark robustness and efficiency against several 
attacks. In 2017, Roy and Pal [16] delivered his proposed method by applying geometric transformation 
attack and geometric transformation attack, and JPEG compression attack to the multiple watermark data. In 
another way, Saqib and Naaz [17] delivered the issue about the types of watermarking. 

While durakovic explored the DOE aspects and provided state-of-the-art of its application. It 
discussed conceptualizing, planning and conducting experiments, and analyzing and interpreting data [18]. 
Parah et al. [19] evaluated the spatial locations which are robust to image processing and geometric attacks. 
The pseudorandom address vector (PAV) determined the location of the least significant bit (LSB) to embed 
the watermark data. In 2018, Barnouti et al. [20] proposed the DWT and DCT for embedding and extracting 
copyright protection. In 2019, Aqel et al. [21] proposed a different level of sub-bands in DWT to evaluate its 
performance. The method can be used to overcome such kinds of illegal activities in the digital image by 
implementing different levels in watermarking that is low-level (LL), low- high (LH), high-low (HL), High- 
high (HH), and the SVD on image to reach the robustness, and imperceptibility. 

Mohammed et al. [22] presented a technique that hides the RGB color element and provides robust 
image watermarking. The discrete wavelet transform and a dual intermediate significant bit (DISB) will 
integrate into one process. The method has a PSNR of 101.97 and NCC of 0.9780. In 2017, Jing [23] 
delivered a digital image watermarking algorithm which is based on DCT transform and Arnold scrambling. 
The algorithm can be well applied with the quality factor 70% and NC equal to 1. 

In this study, we have proposed a scheme of digital watermarking image using 3 level DWT with 
some attacks. These DWT scheme use the parameter a as a function to show how depth the watermark image 
inserts to the host image with the result that the robustness and imperceptibility can obtain the best 
performance. 


2. METHOD 

The proposed algorithm performs wavelet transform on images. The image will be decomposed into 
sub-images of different bands. Furthermore, the process will continue in the coefficients of sub-images. The 
diagram of the primary decomposition of the image is shown in Figure 1. An image is decomposed into 4 
sub-images with 4 times to the whole image which comprised: the LL; as the low-frequency sub-image; the 
HL, as a horizontal component; the LH; as a vertical component, and the HH; as a diagonal component. The 
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DWT filtering will perform the low-frequency part to be decomposed and achieves an n-level decomposition. 


The schematic diagram of the DWT filtering is shown in Figure 2. 
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Figure 2. The schematic filtering of the DWT 


The high and low-frequency components of the image can be extracted by the wavelet transform 
method. The watermark embedded in the higher frequency region and it is less influence on the original 
image which is yielding better transparency of the watermark. In two-dimensional applications of each level 
decomposition, the vertical direction of DWT will perform first and the second process is the horizontal 
direction. There are 4 sub-bands: LLi, LHi, HLi, and HH; [24]. In the embedding process, the intensity of 
each pixel will be multiplied by a value. The high-intensity value affects the grayscale image more clearly. 
However, the higher a value will be affected to the watermarked image is perceptible to the human sight. 
Thus, o value is an important matter to the imperceptibility characteristic. In this experiment, we use a=0.01 
and a=0.03, thus we select the 2048x2048 pixels Lena grayscale image as original or host image and takes 
REA 256x256 pixels as the watermark image. Figure 3 shows the host image and the watermark image. 
Figure 3(a) shows the host image and Figure 3(b) points to the watermarking image 


(b) 


Figure 3. The simulation image for (a) host image and (b) the watermarking image 


After embedding the watermarking image on the host image, we applied the attackers, such as 
gaussian, salt & pepper, and blurring. The next step is the process of extracting the watermark image from 
the watermarked image that has been attacked. After the extraction process, we measure the quality of 
extracted watermark images with the original watermark image. The quality will be performed by some 
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parameters, such as MSE, PSNR, and SSIM. Figure 4 shows the whole process of embedding, attacking, and 
extracting process. 
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Figure 4. The embedding, attacking, and extracting process 


Attacks on the watermarked image can be interpreted as providing interference or disability from an 
image that causes the image to become unclear, blurring, grainy, and so on. These attacks serve to test the 
performance of the proposed scheme. Gaussian noise is the disturbance that is distributed to every pixel in 
the image with a normal distribution (Gaussian). Noise density depends on the probability density function 
(pdf). One of the causes of this noise is the error of image transmission. The amount of noise is determined 
by the mean and variance value. The mean value is 0 while the variance value is 0.01. Thus, the image is 
added Gaussian noise with mean equal to 1 and variance equal to 0.01. Figure 5 shows the effect of the 
watermarked image which attack by gaussian noise. 

Moreover, salt & pepper noise is a common noise in a digital image. This noise has black spots with 
a value of 0 and a white spot with a value of 255 on the grayscale image. The addition of noise into the image 
is applied randomly. Grayscale image added noise salt & pepper with a density equal to 0.01. Figure 6 shows 
the effect of additional salt & pepper noise. The further attack of this experiment is blurring noise. Blurring is 
a noise that provides a blurred effect on the image. The level of image blur can be adjusted by blurring 
parameters. Figure 7 provides the image with blurring noise. 
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Figure 5. The watermarked image Figure 6. The watermarked image Figure 7. The watermarked 
under gaussian noise salt & pepper noise image with blurring noise 


To test the performance of the proposed scheme, several benchmarking criteria have been used, such 
as MSE, PSNR, and SSIM. The mean square value of pixel difference value of original image and distorted 
image can be calculated as a mean squared error (MSE). The size of the mean square value can determine the 
image distortion degree. A function could be written to (1). 


MSE = Yi Wok) — 2G) (1) 


Furthermore, the peak signal-to-noise ratio (PSNR) measures the quality of the watermarked image 
in comparison to the original image (host). It is a standard way of measuring image fidelity. Referring to the 
watermarking requirements, robustness in the watermarking system must have a PSNR value above 20 dB 
[10]. The PSNR is defined as: 


2 
PSNR = 10 log [es | (2) 


Where Imaxis the maximum gray level of the image. In this case, Imax has a maximum value of 255. 
The main problem with the previous two criteria is that they are not similar to what similarity means to the 


human visual system (HVS). Structural similarity (SSIM) is a function defined as (3) which overcomes this 
problem to a great extent. 


— Cbxbytc1)2oxy+c2) 
SSIM = (ug tus +c1)(0g+03+c2) (3) 


Where a, ©, Oxy are mean, variance, and covariance of the images, and C, C, are the stabilizing constants. 
The SSIM has a value between 0-1 and similar images have SSIM near to 1. 


3. RESULTS AND DISCUSSION 

This section explains the test result of the watermarking system after attacking by Gaussian, salt & 
pepper, and blurring noise. Figure 8(a) is the host image (Lena), and Figure 8(b) is the watermark image, 
while Figure 8(c) is the watermarked image. 


(b) 


Figure 8. The images using in simulation for (a) the host image, (b) the watermark image, and 
(c) the watermarked image 
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The performance evaluation of the method is applied by measuring robustness and imperceptibility, 
i.e. the MSE, PSNR, and SSIM values. The following are the measurements results of image quality with 
some attacks using a=0.01. Table 1 shows the effect of some attacks on the perceptual invisibility and 
robustness of the watermarked image. Furthermore, Table 2 shows the performance of the image quality 
using a=0.03. The parameter a influences the performance values in PSNR, MSE, and SSIM which is the 
greater of a value, the better the performance value will be obtained. Comparing with the other experiment 
[25], the proposed method has a different result in PSNR value, which is shown in Table 3. 


Table 1. Measurement of image quality with attacks with a=0.01 
Watermark Gaussian Salt&pepper Blurring Compression 
image attack attack attack attack 


oo REA REA 
PSNR (dB) 33.3 dB 40 dB 
MSE 0.41 ; ; 0.06 
SSIM 0.66 0.89 0.75 0.92 


Table 2. Measurement of image quality with attacks with a=0.03 


Watermark Gaussian Salt&pepper 7 Compression 
image attack attack Blurring attack attack 
n REA REA REA REA 
PSNR (dB) 35.2 dB 45.6 dB 36.1 dB 37.2 dB 
MSE 0.35 0.01 0.21 0.03 
SSIM 0.72 0.95 0.83 0.94 


Table 3. The PSNR comparison between the proposed method and the difference method [25] 
Gaussian Salt & pepper 
Proposed 35.2 dB 45 dB 
Singh 7.5688 dB 10.8871 dB 


4. CONCLUSION 

The experimental results proved that the proposed method produced good imperceptibility with 
SSIM near to 1 and high robustness with PSNR value above 30 dB towards these attacks which are the 
a=0.03 obtained the best result. The salt & pepper attacker has the highest value in robustness and 
imperceptibility because this attacker does not spread to the whole watermarked image pixels. The future 
work will be performed by some optimization algorithms such as a particle swarm and an ant colony 
algorithms to achieve the best embedded watermarked image point location which yielding more robust and 
imperceptible performances. 
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